topic Re: RADIUS EAP/PEAP authentication problem after no issues for over a year + in Community and Online Support Services

RADIUS EAP/PEAP authentication problem after no issues for over a year +

brian_koomen — Tue, 14 Nov 2017 20:53:13 GMT

We have been running the SZ100 RADIUS option to authenticate users to our AD using a NPS.

Yesterday users were no longer able to connect. Log files on the SmartZone 100 show codes of 203 - Client failed to join. On the RADIUS server the error show wrong authentication protocol (EAP)is being used. Should be using PEAP.

Why would the SZ100 configuration change the authentication protocol?

Anybody else have this happen to them?

Re: RADIUS EAP/PEAP authentication problem after no issues for over a year +

hyosang_choi — Wed, 15 Nov 2017 00:25:59 GMT

The eap packet is negotiated between client device and the authentication server.

SZ does not control eap.

Could you show me log which you found?

Re: RADIUS EAP/PEAP authentication problem after no issues for over a year +

jakob_peterh_ns — Wed, 15 Nov 2017 10:39:36 GMT

Test directly from the SZ with a known, working, user/pass.If that works, the Radius connection works, and it's between the client and AP and/or auth server, as Jeronimo writes above.

Re: RADIUS EAP/PEAP authentication problem after no issues for over a year +

brian_koomen — Wed, 15 Nov 2017 18:30:46 GMT

Thanks for the replies.

I ended up rebooting the NPS server first (since updates were pending) but this did not correct the problem. However, I did see in the NPS log files that PEAP protocol was now being used by the clients. I found this to be very strange.

At that point I decided to rebooted the SZ. On reboot the SZ went into a perpetual reboot status screen (counter would count down to 0 and then start counting down again). SZ never came out of this screen. Could not reach the SZ using CLI. I had power cycle the SZ to boot up properly. After checking some logs files and NOT making any config changes, the client started to authenticate successfully.

😛